CREATERESTOREPOINT
Restore point Set: OTL Restore Point (69537929998893056)
========== Files/Folders - Created Within 30 Days ==========
[2011/04/05 07:27:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Sun
[2011/04/04 23:40:18 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.com
[2011/04/04 22:37:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2011/04/04 22:36:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2011/04/04 22:36:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2011/04/04 13:36:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\tmp
[2011/04/03 11:07:30 | 000,097,354 | ---- | C] (Bay Networks, Inc.) -- C:\WINDOWS\System32\dllcache\aspndis3.sys
[2011/04/03 11:07:29 | 000,026,496 | ---- | C] (Advanced System Products, Inc.) -- C:\WINDOWS\System32\dllcache\asc.sys
[2011/04/03 11:07:29 | 000,022,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asc3350p.sys
[2011/04/03 11:07:29 | 000,014,848 | ---- | C] (Advanced System Products, Inc.) -- C:\WINDOWS\System32\dllcache\asc3550.sys
[2011/04/03 11:07:10 | 000,006,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\apmbatt.sys
[2011/04/03 11:07:09 | 000,036,224 | ---- | C] (ADMtek Incorporated.) -- C:\WINDOWS\System32\dllcache\an983.sys
[2011/04/03 11:07:09 | 000,012,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\amsint.sys
[2011/04/03 11:07:08 | 000,016,969 | ---- | C] (AmbiCom, Inc.) -- C:\WINDOWS\System32\dllcache\amb8002.sys
[2011/04/03 11:07:07 | 000,027,678 | ---- | C] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\dllcache\ali5261.sys
[2011/04/03 11:07:07 | 000,026,624 | ---- | C] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\dllcache\alifir.sys
[2011/04/03 11:07:07 | 000,005,248 | ---- | C] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\dllcache\aliide.sys
[2011/04/03 11:07:06 | 000,056,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aic78xx.sys
[2011/04/03 11:07:05 | 000,055,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aic78u2.sys
[2011/04/03 11:07:05 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aha154x.sys
[2011/04/03 11:06:57 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agcgauge.ax
[2011/04/03 11:05:07 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adpu160m.sys
[2011/04/03 11:05:06 | 000,046,112 | ---- | C] (Adaptec, Inc ) -- C:\WINDOWS\System32\dllcache\adptsf50.sys
[2011/04/03 11:05:05 | 000,747,392 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8830.sys
[2011/04/03 11:05:05 | 000,553,984 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8820.sys
[2011/04/03 11:05:05 | 000,010,880 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\admjoy.sys
[2011/04/03 11:05:04 | 000,584,448 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8810.sys
[2011/04/03 11:05:04 | 000,020,160 | ---- | C] (ADMtek Incorporated) -- C:\WINDOWS\System32\dllcache\adm8511.sys
[2011/04/03 11:05:03 | 000,007,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adicvls.sys
[2011/04/03 11:05:02 | 000,061,440 | ---- | C] (Color Flatbed Scanner) -- C:\WINDOWS\System32\dllcache\acerscad.dll
[2011/04/03 11:05:01 | 000,084,480 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\dllcache\ac97via.sys
[2011/04/03 11:05:00 | 000,297,728 | ---- | C] (Silicon Integrated Systems Corp.) -- C:\WINDOWS\System32\dllcache\ac97sis.sys
[2011/04/03 11:05:00 | 000,096,256 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\ac97intc.sys
[2011/04/03 11:04:59 | 000,231,552 | ---- | C] (Acer Laboratories Inc.) -- C:\WINDOWS\System32\dllcache\ac97ali.sys
[2011/04/03 11:04:59 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\abp480n5.sys
[2011/04/03 11:04:58 | 000,462,848 | ---- | C] (Aureal Inc.) -- C:\WINDOWS\System32\dllcache\a3dapi.dll
[2011/04/03 11:04:58 | 000,098,304 | ---- | C] (Aureal Semiconductor) -- C:\WINDOWS\System32\dllcache\a3d.dll
[2011/04/03 11:04:57 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\61883.sys
[2011/04/03 11:04:57 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\8514a.dll
[2011/04/03 11:04:56 | 000,689,216 | ---- | C] (3dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2011/04/03 11:04:56 | 000,148,352 | ---- | C] (3dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2011/04/03 11:04:56 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\4mmdat.sys
[2011/04/03 11:04:55 | 000,762,780 | ---- | C] (3Com, Inc.) -- C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2011/04/03 11:04:55 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2011/04/03 11:04:54 | 000,053,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\1394bus.sys
[2011/04/03 11:04:26 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\s3legacy.dll
[2011/04/01 23:41:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Start Menu\Programs\Auralia 3.0 Student Edition
[2011/03/29 23:50:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Thơ
[2011/03/27 17:07:24 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Owner\Recent
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/04/05 13:41:00 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1220945662-879983540-725345543-1003UA.job
[2011/04/05 13:17:07 | 000,000,438 | ---- | M] () -- C:\WINDOWS\tasks\RegCure Program Check.job
[2011/04/05 13:16:59 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/05 13:11:40 | 000,010,662 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\o6b3o1nmmnenrt3n4
[2011/04/05 09:49:56 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/04/05 08:09:28 | 000,000,318 | ---- | M] () -- C:\WINDOWS\tasks\tempoperfectShakeIcon.job
[2011/04/05 08:05:07 | 000,012,842 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\t66lx23lpui6t55uvc8xwnfy34833kkwq
[2011/04/05 07:49:34 | 000,435,876 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/05 07:49:34 | 000,068,388 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/04/05 06:11:30 | 002,704,488 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/05 06:11:21 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/04/05 03:25:26 | 000,013,624 | -HS- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\3450524166
[2011/04/05 03:25:06 | 000,013,620 | -HS- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\3233898997
[2011/04/05 03:23:46 | 000,013,624 | -HS- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\sns26gx5n4j3fx46a0a60g14b7lq4tq3t6217
[2011/04/05 02:57:46 | 001,006,778 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\rkill.scr
[2011/04/05 02:41:54 | 001,006,778 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\rkill.com
[2011/04/04 23:30:47 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.com
[2011/04/04 15:14:27 | 000,002,183 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Mayoko.lnk
[2011/04/03 15:41:05 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1220945662-879983540-725345543-1003Core.job
[2011/04/03 04:08:24 | 000,000,372 | ---- | M] () -- C:\WINDOWS\tasks\RegCure.job
[2011/04/01 23:41:02 | 000,001,893 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Auralia 3.0 Student Edition.lnk
[2011/03/28 18:28:27 | 000,217,909 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\language_vn_vbb4.xml
[2011/03/28 15:56:18 | 000,027,027 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\hdhp1.jpg
[2011/03/26 23:46:51 | 000,009,654 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\config.php
[2011/03/26 23:46:02 | 000,009,652 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\config.php.bak
[2011/03/26 21:19:17 | 000,001,776 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\paypal_fixed.xml
[2011/03/23 08:03:32 | 000,040,483 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\chimquay.jpg
[2011/03/19 22:13:22 | 000,104,900 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\muadong.jpg
[2011/03/17 11:52:34 | 000,098,032 | ---- | M] (Tonec Inc.) -- C:\WINDOWS\System32\drivers\idmtdi.sys
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/04/05 07:55:22 | 000,000,318 | ---- | C] () -- C:\WINDOWS\tasks\tempoperfectShakeIcon.job
[2011/04/05 07:55:04 | 000,012,842 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\t66lx23lpui6t55uvc8xwnfy34833kkwq
[2011/04/05 07:28:21 | 000,010,662 | -HS- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\o6b3o1nmmnenrt3n4
[2011/04/05 07:28:21 | 000,010,662 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\o6b3o1nmmnenrt3n4
[2011/04/05 07:28:11 | 000,227,725 | -HS- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\ura.exe
[2011/04/05 03:00:07 | 001,006,778 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\rkill.scr
[2011/04/05 02:52:07 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/04/05 02:51:47 | 000,013,624 | -HS- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\3450524166
[2011/04/05 02:44:45 | 001,006,778 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\rkill.com
[2011/04/04 22:40:27 | 000,013,620 | -HS- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\3233898997
[2011/04/04 22:37:20 | 000,014,594 | -HS- | C] () -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\t66lx23lpui6t55uvc8xwnfy34833kkwq
[2011/04/04 22:37:18 | 000,335,872 | -HS- | C] () -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\ouj.exe
[2011/04/04 15:16:50 | 000,013,624 | -HS- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\sns26gx5n4j3fx46a0a60g14b7lq4tq3t6217
[2011/04/03 22:36:13 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/04/01 23:41:02 | 000,001,893 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Auralia 3.0 Student Edition.lnk
[2011/03/28 18:28:26 | 000,217,909 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\language_vn_vbb4.xml
[2011/03/28 15:56:15 | 000,027,027 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\hdhp1.jpg
[2011/03/26 23:46:02 | 000,009,652 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\config.php.bak
[2011/03/26 23:44:41 | 000,009,654 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\config.php
[2011/03/26 21:19:13 | 000,001,776 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\paypal_fixed.xml
[2011/03/23 08:03:30 | 000,040,483 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\chimquay.jpg
[2011/03/19 22:13:19 | 000,104,900 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\muadong.jpg
[2010/10/26 16:34:18 | 010,462,120 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\lotpro32.exe
[2010/10/14 09:38:00 | 000,102,262 | ---- | C] () -- C:\WINDOWS\hpoins05.dat
[2010/06/16 15:15:19 | 000,002,402 | ---- | C] () -- C:\WINDOWS\aopr.ini
[2010/02/19 05:16:18 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\qtmlClient.dll
[2009/12/27 22:45:18 | 037,146,845 | ---- | C] () -- C:\WINDOWS\Microsoft_Office_Templates.exe
[2009/07/27 09:55:39 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\IWUninstall.exe
[2009/07/27 04:59:18 | 000,000,040 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2009/05/29 12:53:49 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009/03/15 23:43:33 | 000,000,531 | ---- | C] () -- C:\WINDOWS\ULEAD32.INI
[2009/03/04 16:43:28 | 000,508,200 | ---- | C] () -- C:\WINDOWS\System32\ICCProfiles.dll
[2008/11/08 06:13:36 | 000,118,784 | ---- | C] () -- C:\WINDOWS\dsdxirmv.exe
[2008/11/05 00:01:32 | 000,000,604 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\T2
[2008/11/05 00:01:32 | 000,000,604 | -H-- | C] () -- C:\Program Files\STLL Notifier
[2008/10/24 15:54:27 | 000,000,073 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini
[2008/10/06 06:10:30 | 000,166,912 | ---- | C] () -- C:\WINDOWS\System32\libmcrypt.dll
[2008/10/02 00:39:55 | 000,000,022 | ---- | C] () -- C:\WINDOWS\MathMagic Personal 3.64.INI
[2008/09/26 04:51:23 | 000,000,043 | ---- | C] () -- C:\WINDOWS\Aurora Media Workshop.INI
[2008/09/24 01:11:03 | 002,463,976 | ---- | C] () -- C:\WINDOWS\System32\NPSWF32.dll
[2008/09/21 08:16:10 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\nnr.dll
[2008/09/20 20:43:05 | 000,117,760 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/09/17 10:12:06 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\PUTTY.RND
[2008/09/16 08:40:38 | 000,000,411 | ---- | C] () -- C:\WINDOWS\MagicTranslator.ini
[2008/09/15 12:38:51 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008/09/14 23:10:27 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2008/09/14 23:04:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VPC32.INI
[2008/09/14 19:11:14 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/09/14 15:45:33 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008/09/14 12:57:31 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008/09/14 12:49:14 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/09/14 05:40:44 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/09/14 05:39:27 | 002,704,488 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2003/07/16 16:54:55 | 000,004,594 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003/07/16 16:54:54 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2003/07/16 16:41:25 | 000,435,876 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2003/07/16 16:41:25 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2003/07/16 16:41:23 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2003/07/16 16:41:21 | 000,068,388 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2003/07/16 16:39:07 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003/07/16 16:33:50 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2003/07/16 16:33:39 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2003/07/16 16:27:41 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2003/07/16 16:26:37 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2002/10/15 04:30:00 | 000,053,760 | ---- | C] () -- C:\WINDOWS\System32\intedreg.exe
[2002/03/21 15:39:02 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL
========== Custom Scans ==========
< >
< %systemroot%\Fonts\*.com >
[2006/06/29 14:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2008/09/14 12:51:20 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2007/03/22 20:24:58 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2006/10/26 22:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
[2008/07/06 06:50:03 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
[2010/04/05 22:47:09 | 000,016,384 | -H-- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\key3.db
< %PROGRAMFILES%\*.* >
[2008/10/02 00:39:35 | 000,000,315 | ---- | M] () -- C:\Program Files\setuplog.txt
[2008/11/05 00:01:32 | 000,000,604 | -H-- | M] () -- C:\Program Files\STLL Notifier
< %APPDATA%\Update\*.* >
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/09/15 15:01:23 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/09/14 22:52:24 | 000,000,177 | -HS- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2008/09/14 12:59:21 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >
< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >
< %PROGRAMFILES%\Internet Explorer\*.tmp >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %USERPROFILE%\My Documents\*.exe >
[2007/09/24 09:47:14 | 001,370,624 | ---- | M] (Dreamingsoft, Inc.) -- C:\Documents and Settings\Owner\My Documents\pfDesktop.exe
< %USERPROFILE%\*.exe >
< %systemroot%\ADDINS\*.* >
< %systemroot%\assembly\*.bak2 >
< %systemroot%\Config\*.* >
< %systemroot%\REPAIR\*.bak2 >
< %systemroot%\SECURITY\Database\*.sdb /x >
< %systemroot%\SYSTEM\*.bak2 >
< %systemroot%\Web\*.bak2 >
< %systemroot%\Driver Cache\*.* >
< %PROGRAMFILES%\Mozilla Firefox\*.exe >
[2011/04/03 22:35:48 | 000,125,912 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\crashreporter.exe
[2011/04/03 22:35:49 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
[2011/04/03 22:35:53 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
[2011/04/03 22:35:54 | 000,261,080 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\updater.exe
< %ProgramFiles%\Microsoft Common\*.* >
< %ProgramFiles%\TinyProxy. >
< %USERPROFILE%\Favorites\*.url /x >
[2008/09/14 22:52:24 | 000,000,122 | -HS- | M] () -- C:\Documents and Settings\Owner\Favorites\Desktop.ini
[2010/10/22 12:34:35 | 000,000,258 | ---- | M] () -- C:\Documents and Settings\Owner\Favorites\NCH Audio and Telephony Software.lnk
< %systemroot%\system32\*.bk >
< %systemroot%\*.te >
< %systemroot%\system32\system32\*.* >
< %ALLUSERSPROFILE%\*.dat /x >
[2008/10/01 20:14:46 | 000,000,453 | ---- | M] () -- C:\Documents and Settings\All Users\Documents.xmp
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\*.exe /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2008/11/02 10:19:37 | 000,717,296 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
[2008/09/14 05:38:37 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2008/09/14 05:38:37 | 000,602,112 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2008/09/14 05:38:37 | 000,393,216 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %systemroot%\system32\*.sys >
[2003/07/16 16:24:13 | 000,009,029 | ---- | M] () -- C:\WINDOWS\system32\ansi.sys
[2003/07/16 16:25:52 | 000,027,097 | ---- | M] () -- C:\WINDOWS\system32\country.sys
[2003/07/16 16:29:25 | 000,004,768 | ---- | M] () -- C:\WINDOWS\system32\himem.sys
[2003/07/16 16:31:42 | 000,042,809 | ---- | M] () -- C:\WINDOWS\system32\key01.sys
[2003/07/16 16:31:44 | 000,042,537 | ---- | M] () -- C:\WINDOWS\system32\keyboard.sys
[2003/07/16 16:39:32 | 000,027,866 | ---- | M] () -- C:\WINDOWS\system32\ntdos.sys
[2003/07/16 16:39:33 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos404.sys
[2003/07/16 16:39:33 | 000,029,370 | ---- | M] () -- C:\WINDOWS\system32\ntdos411.sys
[2003/07/16 16:39:37 | 000,029,274 | ---- | M] () -- C:\WINDOWS\system32\ntdos412.sys
[2003/07/16 16:39:38 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos804.sys
[2004/08/04 01:45:08 | 000,033,840 | ---- | M] () -- C:\WINDOWS\system32\ntio.sys
[2004/08/04 01:45:14 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio404.sys
[2004/08/04 01:45:10 | 000,035,648 | ---- | M] () -- C:\WINDOWS\system32\ntio411.sys
[2004/08/04 01:45:15 | 000,035,424 | ---- | M] () -- C:\WINDOWS\system32\ntio412.sys
[2004/08/04 01:45:12 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio804.sys
[2008/04/13 14:44:59 | 000,017,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\watchdog.sys
[2010/12/31 09:10:33 | 001,854,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\win32k.sys
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\drivers\*.dll >
[2008/04/13 20:11:48 | 000,004,255 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv01nt5.dll
[2008/04/13 20:11:48 | 000,003,967 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv02nt5.dll
[2008/04/13 20:11:48 | 000,003,615 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv05nt5.dll
[2008/04/13 20:11:48 | 000,003,647 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv07nt5.dll
[2008/04/13 20:11:48 | 000,003,135 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv08nt5.dll
[2008/04/13 20:11:48 | 000,003,711 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv09nt5.dll
[2008/04/13 20:11:48 | 000,003,775 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv11nt5.dll
[2008/04/13 20:11:50 | 000,021,183 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv01nt5.dll
[2008/04/13 20:11:50 | 000,011,359 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv02nt5.dll
[2008/04/13 20:11:50 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv04nt5.dll
[2008/04/13 20:11:50 | 000,014,143 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv06nt5.dll
[2008/04/13 20:11:50 | 000,017,279 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv10nt5.dll
[2008/04/13 20:11:50 | 000,015,423 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[2008/04/13 20:12:05 | 000,003,901 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\siint5.dll
[2008/04/13 20:12:08 | 000,011,325 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\vchnt5.dll
< %systemroot%\system32\drivers\*.ini >
< %systemroot%\system32\drivers\*.exe >
< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >
[2007/03/22 20:24:58 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2006/10/26 22:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
< %SYSTEMDRIVE%\*.* >
[2011/04/02 12:22:06 | 000,031,878 | ---- | M] () -- C:\asmruntime.log
[2008/09/14 12:51:45 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2009/06/03 18:22:54 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2008/09/14 12:51:45 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2007/11/07 09:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | ---- | M] () -- C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | ---- | M] () -- C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | ---- | M] () -- C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | ---- | M] () -- C:\eula.3082.txt
[2009/06/03 16:50:48 | 000,003,954 | ---- | M] () -- C:\ffdata.txt
[2009/06/03 16:47:10 | 000,278,083 | ---- | M] () -- C:\GetUnKey.txt
[2007/11/07 09:00:40 | 000,001,110 | ---- | M] () -- C:\globdata.ini
[2007/11/07 09:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
[2007/11/07 09:00:40 | 000,000,843 | ---- | M] () -- C:\install.ini
[2007/11/07 09:03:18 | 000,076,304 | ---- | M] (Microsoft Corporation) -- C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | ---- | M] (Microsoft Corporation) -- C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | ---- | M] (Microsoft Corporation) -- C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | ---- | M] (Microsoft Corporation) -- C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | ---- | M] (Microsoft Corporation) -- C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | ---- | M] (Microsoft Corporation) -- C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.3082.dll
[2008/09/14 12:51:45 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2008/09/14 12:51:45 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008/09/14 21:56:57 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/09/15 14:51:20 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2011/04/05 13:16:35 | 1340,080,128 | -HS- | M] () -- C:\pagefile.sys
[2011/04/05 03:16:26 | 000,000,359 | ---- | M] () -- C:\rkill.log
[2010/01/11 21:30:11 | 000,000,216 | ---- | M] () -- C:\temp.txt
[2007/11/07 09:00:40 | 000,005,686 | ---- | M] () -- C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | ---- | M] () -- C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | ---- | M] () -- C:\VC_RED.MSI
[2008/09/15 20:06:54 | 000,000,146 | ---- | M] () -- C:\YServer.txt
< %PROGRAMFILES%\*. >
[2008/10/01 19:45:43 | 000,000,000 | ---D | M] -- C:\Program Files\ACD Systems
[2010/02/18 00:45:47 | 000,000,000 | ---D | M] -- C:\Program Files\Acronis
[2010/10/15 09:55:25 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2010/04/06 02:28:25 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe Media Player
[2009/08/03 02:11:40 | 000,000,000 | ---D | M] -- C:\Program Files\AFT software
[2010/07/31 03:10:49 | 000,000,000 | ---D | M] -- C:\Program Files\Alawar
[2010/01/07 22:18:15 | 000,000,000 | ---D | M] -- C:\Program Files\Aleo Software
[2008/09/14 18:45:33 | 000,000,000 | ---D | M] -- C:\Program Files\Analog Devices
[2008/09/15 15:59:28 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2011/02/12 02:10:57 | 000,000,000 | ---D | M] -- C:\Program Files\Artisteer 2
[2011/02/12 06:41:14 | 000,000,000 | ---D | M] -- C:\Program Files\Artisteer 3
[2008/11/03 16:56:54 | 000,000,000 | ---D | M] -- C:\Program Files\ASIO4ALL v2
[2008/09/15 00:40:14 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2008/09/14 15:39:17 | 000,000,000 | ---D | M] -- C:\Program Files\Broadcom
[2008/09/14 13:22:54 | 000,000,000 | ---D | M] -- C:\Program Files\Broadcom Management Programs
[2011/02/04 11:20:40 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2011/01/26 09:40:26 | 000,000,000 | ---D | M] -- C:\Program Files\Celemony
[2010/10/13 22:38:21 | 000,000,000 | ---D | M] -- C:\Program Files\Chord Buster
[2011/01/25 06:15:23 | 000,000,000 | ---D | M] -- C:\Program Files\ChordWizard Gold 2.5
[2011/01/24 14:20:46 | 000,000,000 | ---D | M] -- C:\Program Files\ChordWizard Songtrix Gold 3.0
[2011/01/26 10:40:53 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2008/09/21 10:08:05 | 000,000,000 | ---D | M] -- C:\Program Files\Cool Record Edit Pro
[2010/04/05 00:33:09 | 000,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Pro
[2010/12/15 22:18:18 | 000,000,000 | ---D | M] -- C:\Program Files\Digital Guitar Tuner 2.3
[2010/10/22 17:20:55 | 000,000,000 | ---D | M] -- C:\Program Files\Drumsite demo
[2009/07/29 17:01:49 | 000,000,000 | ---D | M] -- C:\Program Files\EarMaster Pro 5
[2009/04/20 12:49:29 | 000,000,000 | ---D | M] -- C:\Program Files\Easy Button Menu Maker
[2009/12/30 19:01:54 | 000,000,000 | ---D | M] -- C:\Program Files\eBook Edit Pro
[2010/08/16 20:09:11 | 000,000,000 | ---D | M] -- C:\Program Files\EditPlus 3
[2010/06/16 15:15:10 | 000,000,000 | ---D | M] -- C:\Program Files\Elcomsoft
[2009/02/14 06:32:52 | 000,000,000 | ---D | M] -- C:\Program Files\Encore
[2009/07/17 01:08:38 | 000,000,000 | ---D | M] -- C:\Program Files\Finale 2009
[2008/09/15 22:22:25 | 000,000,000 | ---D | M] -- C:\Program Files\Gadwin Systems
[2008/11/15 01:01:43 | 000,000,000 | ---D | M] -- C:\Program Files\Garritan
[2010/10/14 05:06:13 | 000,000,000 | ---D | M] -- C:\Program Files\gs
[2009/07/18 13:31:32 | 000,000,000 | ---D | M] -- C:\Program Files\GSM
[2008/09/15 00:03:01 | 000,000,000 | ---D | M] -- C:\Program Files\Guitar Pro 5
[2011/03/24 08:36:16 | 000,000,000 | ---D | M] -- C:\Program Files\Guitar Scales Method
[2011/01/10 23:44:41 | 000,000,000 | ---D | M] -- C:\Program Files\Guitar Speed Trainer
[2010/01/07 23:19:55 | 000,000,000 | ---D | M] -- C:\Program Files\GVOX
[2010/10/14 09:41:31 | 000,000,000 | ---D | M] -- C:\Program Files\HP
[2008/10/07 06:09:10 | 000,000,000 | ---D | M] -- C:\Program Files\IDM Computer Solutions
[2009/07/29 18:28:37 | 000,000,000 | ---D | M] -- C:\Program Files\Image-Line
[2011/01/26 09:40:26 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2008/09/14 18:41:26 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2011/03/26 17:21:21 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Download Manager
[2011/02/10 01:38:12 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2009/01/14 05:17:51 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2009/07/30 07:45:04 | 000,000,000 | ---D | M] -- C:\Program Files\K-Lite Codec Pack
[2009/12/26 14:49:41 | 000,000,000 | ---D | M] -- C:\Program Files\LongTailVideo
[2010/12/22 23:56:29 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/11/26 21:48:56 | 000,000,000 | ---D | M] -- C:\Program Files\Mayoko
[2008/09/21 10:08:23 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger
[2008/09/15 13:36:17 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2009/07/29 04:18:49 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Expression
[2008/09/14 12:55:30 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2009/12/21 12:11:18 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Media
[2008/09/14 23:34:06 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2009/07/26 10:47:49 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SDKs
[2011/03/18 10:43:31 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2008/09/14 23:33:45 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio
[2008/10/23 20:25:12 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio 8
[2009/07/26 01:11:10 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2008/10/23 20:24:09 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2010/08/11 15:48:54 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2011/04/03 22:37:50 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2008/10/23 20:05:09 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2008/09/21 00:31:24 | 000,000,000 | ---D | M] -- C:\Program Files\MSECACHE
[2008/09/14 12:48:25 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
[2008/09/14 12:48:15 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2009/07/28 03:13:40 | 000,000,000 | ---D | M] -- C:\Program Files\MusicLab
[2009/08/12 04:04:37 | 000,000,000 | ---D | M] -- C:\Program Files\NCH Swift Sound
[2008/09/15 14:55:19 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2010/10/14 05:07:55 | 000,000,000 | ---D | M] -- C:\Program Files\Neuratron AudioScore Lite
[2010/10/14 05:06:20 | 000,000,000 | ---D | M] -- C:\Program Files\Neuratron PhotoScore Lite
[2009/06/13 22:28:15 | 000,000,000 | ---D | M] -- C:\Program Files\Nitro PDF
[2008/09/14 12:50:28 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
[2010/12/15 18:35:39 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2008/11/03 16:55:32 | 000,000,000 | ---D | M] -- C:\Program Files\Outsim
[2010/04/17 03:13:54 | 000,000,000 | ---D | M] -- C:\Program Files\Paltalk Messenger
[2010/07/19 15:32:14 | 000,000,000 | ---D | M] -- C:\Program Files\Perfect Uninstaller
[2009/07/29 14:07:03 | 000,000,000 | ---D | M] -- C:\Program Files\Pianoteq 2.2
[2008/11/15 01:01:43 | 000,000,000 | ---D | M] -- C:\Program Files\Plogue
[2009/05/30 12:35:57 | 000,000,000 | ---D | M] -- C:\Program Files\Power MIDI to MP3
[2009/12/24 04:46:10 | 000,000,000 | ---D | M] -- C:\Program Files\PowerISO
[2008/09/15 16:23:48 | 000,000,000 | ---D | M] -- C:\Program Files\PuTTY
[2008/09/15 16:00:54 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2010/12/03 14:43:52 | 000,000,000 | ---D | M] -- C:\Program Files\QwikChord
[2008/10/06 19:20:49 | 000,000,000 | ---D | M] -- C:\Program Files\Rapid CSS 2008
[2010/02/25 03:25:43 | 000,000,000 | ---D | M] -- C:\Program Files\Rapid PHP 2008
[2008/09/15 03:40:20 | 000,000,000 | ---D | M] -- C:\Program Files\RapidTyping
[2008/09/20 01:35:03 | 000,000,000 | ---D | M] -- C:\Program Files\Raxco
[2008/10/23 20:04:55 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2010/07/27 09:56:41 | 000,000,000 | ---D | M] -- C:\Program Files\RegCure
[2010/12/03 15:25:06 | 000,000,000 | ---D | M] -- C:\Program Files\Renegade Minds
[2009/04/17 23:50:15 | 000,000,000 | ---D | M] -- C:\Program Files\RhinoSoft.com
[2011/04/01 23:41:37 | 000,000,000 | ---D | M] -- C:\Program Files\Rising Software
[2010/10/22 14:33:44 | 000,000,000 | ---D | M] -- C:\Program Files\Rocket French
[2008/09/14 14:31:16 | 000,000,000 | ---D | M] -- C:\Program Files\Rogers
[2010/10/14 05:13:31 | 000,000,000 | ---D | M] -- C:\Program Files\Sibelius Software
[2010/10/18 08:59:44 | 000,000,000 | ---D | M] -- C:\Program Files\Singorama
[2009/02/14 12:13:11 | 000,000,000 | ---D | M] -- C:\Program Files\Sion Software
[2008/09/14 13:28:09 | 000,000,000 | ---D | M] -- C:\Program Files\Smart Modular
[2010/02/21 03:14:11 | 000,000,000 | ---D | M] -- C:\Program Files\Smith Micro
[2010/02/19 18:58:05 | 000,000,000 | ---D | M] -- C:\Program Files\Steinberg
[2008/09/14 18:31:50 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec
[2011/04/05 13:19:25 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec AntiVirus
[2010/02/19 19:58:38 | 000,000,000 | ---D | M] -- C:\Program Files\Syncrosoft
[2010/10/19 15:12:22 | 000,000,000 | ---D | M] -- C:\Program Files\TechSmith
[2008/09/16 05:23:04 | 000,000,000 | ---D | M] -- C:\Program Files\TextPad 5
[2008/09/18 23:12:09 | 000,000,000 | ---D | M] -- C:\Program Files\Total Video Converter
[2010/08/08 01:12:00 | 000,000,000 | R--D | M] -- C:\Program Files\TypingMaster
[2011/01/26 09:43:10 | 000,000,000 | ---D | M] -- C:\Program Files\u-he
[2009/03/15 23:43:28 | 000,000,000 | ---D | M] -- C:\Program Files\Ulead Systems
[2010/04/09 15:58:50 | 000,000,000 | ---D | M] -- C:\Program Files\Unlocker
[2008/09/14 23:27:12 | 000,000,000 | ---D | M] -- C:\Program Files\Vpskeys
[2011/02/15 19:47:30 | 000,000,000 | ---D | M] -- C:\Program Files\VS Revo Group
[2010/10/09 23:07:08 | 000,000,000 | ---D | M] -- C:\Program Files\WashAndGo
[2008/09/23 15:07:54 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Installer Clean Up
[2010/10/30 17:43:33 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Lotto Pro 2000
[2011/01/25 06:12:18 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
[2009/04/16 08:31:47 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2010/02/17 01:34:07 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2008/10/29 18:27:40 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR
[2009/07/26 10:48:15 | 000,000,000 | ---D | M] -- C:\Program Files\WPF Toolkit
[2011/04/02 12:28:10 | 000,000,000 | ---D | M] -- C:\Program Files\WS_FTP Pro
[2010/02/19 06:01:04 | 000,000,000 | ---D | M] -- C:\Program Files\Xara
[2008/09/14 12:55:30 | 000,000,000 | ---D | M] -- C:\Program Files\xerox
[2010/04/29 16:17:16 | 000,000,000 | ---D | M] -- C:\Program Files\Xilisoft
[2009/08/06 16:06:58 | 000,000,000 | ---D | M] -- C:\Program Files\Yahoo!
[2011/02/01 20:51:56 | 000,000,000 | ---D | M] -- C:\Program Files\Your Uninstaller 2010
< %appdata%\*.* >
[2008/09/14 05:40:19 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\Owner\Application Data\desktop.ini
[2010/10/26 16:34:18 | 010,462,120 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\lotpro32.exe
< MD5 for: AGP440.SYS >
[2008/09/14 21:52:05 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008/09/15 14:41:51 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008/09/14 21:52:05 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2008/09/15 14:41:51 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\dllcache\agp440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004/08/04 02:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
< MD5 for: ATAPI.SYS >
[2003/07/16 16:46:14 | 010,158,890 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2008/09/14 21:52:05 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008/09/15 14:41:51 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008/09/14 21:52:05 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2008/09/15 14:41:51 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2003/07/16 16:24:25 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/04 01:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: DISK.SYS >
[2003/07/16 16:46:14 | 010,158,890 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:disk.sys
[2008/09/14 21:52:05 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
[2008/09/15 14:41:51 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
[2008/09/14 21:52:05 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:disk.sys
[2008/09/15 14:41:51 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys
[2004/08/04 01:59:54 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys
[2008/04/13 14:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys
[2008/04/13 14:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys
< MD5 for: EVENTLOG.DLL >
[2009/12/20 01:00:00 | 000,037,520 | ---- | M] (perl.org) MD5=2852D57385C4709EAAE2F9DB01AD3672 -- C:\xampp\perl\site\lib\auto\Win32\EventLog\EventLog.dll
[2008/04/13 20:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 20:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
[2004/08/04 03:56:42 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
Last edited by silverb on 5th April 2011, 6:55 pm; edited 4 times in total